Feature request - support auth proxy authentication

[ryn9]

Perhaps this already exists, but I didn't see anything about it in the docs.

I was hoping the project would support auth proxy authentication.

That is - it would allow login, without password, given a user name (via host header) from a proxy listed in an allow list.

I am sure in the future more complex authentication mechanisms will be requested, but this should be prioritized as auth proxies can potentially offload doing many different authentication mechanisms.

An example of project supporting this:
https://grafana.com/docs/grafana/latest/setup-grafana/configure-security/configure-authentication/auth-proxy/

[alok87]

@MikeShi42 we should give this support as most orgs would want to try out and auth is important to be able to use.

[pulpdrew]

Hi @ryn9, echoing what was said in #1306, we appreciate you raising this issue, but unfortunately we won’t be implementing this feature since it overlaps with functionality we reserve for our commercial enterprise offering.

While we aim to keep as much as possible open source, certain features that largely are relevant to enterprises (like SSO/SAML, RBAC, etc.) are kept separate to help ensure the long-term sustainability of the project.

Please don’t hesitate to reach out for future contributions if you’d like clarification on our development roadmap or the types of features we can accept.